Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/10ee14ab-625c-36d9-8450-245893eff1c8.roa
File:                     10ee14ab-625c-36d9-8450-245893eff1c8.roa (raw, json)
Hash identifier:          fynWSkzSGygQ75kUsZ92nvm5arfsC7EhB3KsKn6D6yg=
Subject key identifier:   C6:71:4E:52:08:18:AA:46:95:22:0D:25:87:01:FB:B3:EE:8C:67:64
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285845A490FEC2A971821209E9C3C0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/10ee14ab-625c-36d9-8450-245893eff1c8.roa
Signing time:             Tue 23 Apr 2024 16:30:47 +0000
ROA not before:           Tue 23 Apr 2024 16:30:47 +0000
ROA not after:            Mon 22 Jul 2024 16:30:47 +0000
asID:                     7018
IP address blocks:        209.163.117.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a4:90:fe:c2:a9:71:82:12:09:e9:c3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Apr 23 16:30:47 2024 GMT
            Not After : Jul 22 16:30:47 2024 GMT
        Subject: CN=5b1da7a3-3aed-4817-93e7-0be9e5f2a300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:1f:14:34:3e:76:4c:1e:89:c1:93:76:2c:bb:
                    91:fd:07:1a:d8:9b:3b:ff:a3:70:83:d3:35:2c:4b:
                    91:f5:4b:6e:b9:a8:d8:7b:c1:3a:ee:1b:44:f8:42:
                    c5:d8:02:9a:29:14:1a:cc:60:31:b1:75:f1:7a:80:
                    9e:32:d1:c6:0e:f4:20:3f:53:ba:e5:5c:78:c1:a0:
                    3f:82:29:88:7e:54:3c:a2:94:c5:ed:63:ac:a1:8c:
                    7a:13:50:d0:54:aa:f7:98:7c:15:b2:d7:f8:2d:e5:
                    8d:dd:67:c0:16:eb:a5:5d:41:28:77:80:2f:1c:f4:
                    aa:9f:98:6a:b4:ff:94:10:85:8e:1d:28:26:be:81:
                    f0:81:3c:d9:39:49:bd:5e:b9:6b:0c:05:35:39:19:
                    c3:f9:65:f4:dc:db:87:e9:05:57:08:32:d6:1c:42:
                    13:ee:ed:56:24:fc:25:46:c4:fd:bb:9d:ca:62:90:
                    98:ea:1a:71:b2:73:d3:f1:81:42:1a:6c:79:d2:6d:
                    31:82:2f:fc:87:45:0d:6c:99:68:b7:38:05:b3:bb:
                    4c:56:46:11:dc:f6:71:b2:e1:80:de:34:bd:9f:85:
                    84:49:2a:8f:cb:6d:d2:21:bf:70:d1:b3:03:08:70:
                    db:d7:0c:b3:f5:ca:5f:25:c7:c4:86:85:31:3d:04:
                    ae:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:71:4E:52:08:18:AA:46:95:22:0D:25:87:01:FB:B3:EE:8C:67:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/10ee14ab-625c-36d9-8450-245893eff1c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.163.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:5c:24:ba:8e:51:be:24:36:2c:a3:5a:ec:ba:8e:45:eb:72:
         c3:ad:31:63:a5:76:eb:44:0f:67:01:2e:3c:96:af:dd:4e:59:
         ad:4f:02:a1:f7:59:a1:cf:7b:01:be:94:1d:a7:b7:93:91:11:
         e2:be:f0:31:11:16:ff:93:e2:bc:7a:24:71:b7:33:b3:25:ad:
         2a:a2:a8:ea:44:88:38:f2:10:aa:eb:0f:40:96:1d:52:19:0a:
         b4:ec:90:56:8c:16:09:e2:b8:68:cd:39:6f:50:24:97:d5:c4:
         0b:08:57:56:9d:bb:6b:20:7b:73:78:bf:5b:1b:82:b5:db:d9:
         4c:36:fb:cf:f1:e6:91:4a:94:4e:a2:7f:60:c8:ad:d9:68:c8:
         13:89:74:67:c2:28:44:c7:a0:d7:b0:4c:51:c5:51:64:35:f2:
         93:94:a0:29:90:bc:43:df:ee:3b:32:7e:62:ff:76:e2:29:e5:
         65:ff:07:78:49:fb:02:ec:06:d0:72:e5:6b:fe:9a:c2:1d:58:
         78:09:f9:1d:9d:32:2f:02:b0:fd:1c:43:b9:4e:d8:44:06:bc:
         66:74:e1:0e:5e:79:a7:e2:5c:91:cc:a6:ba:7d:55:42:40:c1:
         c4:fa:f0:25:bf:34:fe:d6:f3:57:33:09:55:4f:8b:6b:73:0e:
         78:93:aa:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:52:17 2024 by rpki-client on console-ams.rpki-client.org